Windows Mobile prior to version 6 do not support wildcard certificates. That will mean you cannot use the certificate to secure Exchange ActiveSync.
Simon. ________________________________ From: Glen Johnson [mailto:[EMAIL PROTECTED] Sent: 12 June 2008 15:45 To: MS-Exchange Admin Issues Subject: RE: Exchange Certificate Pardon my jump in here on this old thread but I've been on vacation for a while and just now catching up. Care to elaborate on the comment about wildcard cert problems? We just purchased one and I'd like to start using it but if it is going to cause problems, I'd appreciate any heads-up you can share. Thanks. Glen. From: Simon Butler [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 28, 2008 1:23 PM To: MS-Exchange Admin Issues Subject: RE: Exchange Certificate There isn't a lot to it. Use the wizard on this page to generate the request: https://www.digicert.com/easy-csr/exchange2007.htm You need to include the real name of the server (server), the FQDN of the server (server.domain.local), the OWA address (owa.domain.com) and the autodiscover (autodiscover.domain.com). Most of the SSL providers allow five domains. I usually recommend that the owa address is the main common name. Once you have generated the request command, paste in to PowerShell on the server. You don't have to use Digicert. You can then take the result and use it with your preferred vendor. http://certificatesforexchange.com/ (disclaimer - that is my site) does the certificates for US$59.99/year which are from GoDaddy but are cheaper than GoDaddy are currently selling the certificates for. Don't be tempted to use a wildcard certificate as there can be some issues with their use. After you get the certificate back from the supplier, you need to import the result: http://technet.microsoft.com/en-us/library/bb124424.aspx Finally you can enable the certificate for the services that you require. For that I tend to use PowerGui (http://www.powergui.org) which makes the process quick and easy. For certificate acceptance you will have to adjust the URLs on some services, and ensure that the clients are using the correct URL for access. This is particularly important with POP3 and IMAP which can often not cope with SSL prompts - for example you are using the IP address for the server. Simon. -- Simon Butler MVP: Exchange, MCSE Amset IT Solutions Ltd. e: [EMAIL PROTECTED] w: www.amset.co.uk w: www.amset.info Need cheap certificates for Exchange, compatible with Windows Mobile 5.0? http://CertificatesForExchange.com/<http://certificatesforexchange.com/> for certificates from just $23.99. Need a domain for your certificate? http://DomainsForExchange.net/<http://domainsforexchange.net/> ________________________________ From: Ehren Benson [mailto:[EMAIL PROTECTED] Sent: 28 May 2008 17:55 To: MS-Exchange Admin Issues Subject: RE: Exchange Certificate Sorry, exchange 2007 Ehren J. Benson, MCSE Windows Systems Administrator [EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]> 517-884-5469 From: Michael B. Smith [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 28, 2008 12:47 PM To: MS-Exchange Admin Issues Subject: RE: Exchange Certificate Knowing the version of Exchange would be a great help. Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com From: Ehren Benson [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 28, 2008 12:36 PM To: MS-Exchange Admin Issues Subject: Exchange Certificate Hello! I need to get a certificate so that the warnings can go away for IMAP, SMTP and OWA. I have done a bit of reading on this and it seems less than straightforward. Has anyone done this and had an easy or hard time with it? Who did you buy your cert from and do you have any resources that clearly specify how to create the request and then import the cert. I want to have my ducks in a row before I do this because I know just as it can make everything work smoothly it can expediously bring everything to a screeching halt if not done correctly! Thanks Ehren J. Benson, MCSE Windows Systems Administrator Department of Physics and Astronomy Michigan State University 1209 A Biomed Phys Sci [EMAIL PROTECTED]<mailto:[EMAIL PROTECTED]> 517-884-5469 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
